<abstract xmlns="http://www.w3.org/1999/xhtml"><p>Human factors remained unexplored and underappreciated in information security. The mounting cyber-attacks, data breaches, and ransomware attacks are a result of human-enabled errors, in fact, 95% of all cyber incidents are human-enabled. Research indicates that existing information security plans do not account for human factors in risk management or auditing. Corporate executives, managers, and cybersecurity professionals rely extensively on technology to avert cybersecurity incidents. Managers fallaciously believe that technology is the key to improving security defenses even though research indicates that new technologies create unintended consequences; nonetheless, technological induced errors are human-enabled. Managers’ current perspective on the human factors problem information security is too narrow in scope and more than a training problem. The management of complex cybersecurity operations accompanied by mounting human factor challenges exceeds the expertise of most information security professionals; yet, managers are reluctant to seek the expertise of human factors specialists, cognitive scientists, and behavioral analysts to implement effective strategies and objectives to reduce human-enabled error in information security.</p></abstract>

Human factors remained unexplored and underappreciated in information security. The mounting cyber-attacks, data breaches, and ransomware attacks are a result of human-enabled errors, in fact, 95% of all cyber incidents are human-enabled. Research indicates that existing information security plans do not account for human factors in risk management or auditing. Corporate executives, managers, and cybersecurity professionals rely extensively on technology to avert cybersecurity incidents. Managers fallaciously believe that technology is the key to improving security defenses even though research indicates that new technologies create unintended consequences; nonetheless, technological induced errors are human-enabled. Managers’ current perspective on the human factors problem information security is too narrow in scope and more than a training problem. The management of complex cybersecurity operations accompanied by mounting human factor challenges exceeds the expertise of most information security professionals; yet, managers are reluctant to seek the expertise of human factors specialists, cognitive scientists, and behavioral analysts to implement effective strategies and objectives to reduce human-enabled error in information security.

Botching Human Factors in Cybersecurity in Business Organizations

University of Maryland University College

HOLISTICA – Journal of Business and Public Administration

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

{"article-title":"Botching Human Factors in Cybersecurity in Business Organizations"}

Human factors remained unexplored and underappreciated in information security. The mounting cyber-attacks, data breaches, and ransomware attacks are a result...

Botching Human Factors in Cybersecurity in Business Organizations

Pubblicato online: 19 dic 2018

Pagine: 71 - 88

DOI: https://doi.org/10.2478/hjbpa-2018-0024

Parole chiave
Information Security, Cybersecurity, Human Factors, Technological Determinism, Human-centered Cybersecurity, Human-enabled Errors, Technology

© 2018 Calvin Nobles, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Botching Human Factors in Cybersecurity in Business Organizations

Pubblicato online: 19 dic 2018

Pagine: 71 - 88

DOI: https://doi.org/10.2478/hjbpa-2018-0024

Parole chiaveInformation Security, Cybersecurity, Human Factors, Technological Determinism, Human-centered Cybersecurity, Human-enabled Errors, Technology

© 2018 Calvin Nobles, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Parole chiave
Information Security, Cybersecurity, Human Factors, Technological Determinism, Human-centered Cybersecurity, Human-enabled Errors, Technology